DMVPN with hub behind NAT

Oct 03, 2005 3 Replies
DMVPN with hub behind NAT open original image

Hello,



I want to run DMVPN with hub (3745 12.314T2) behind NAT and spokes (1812



12.3(14)YT1) configured with public ip addresses. "Standard" configuration doesn't work. Is that configuration possible ? Is there any example for that configuration ? (I cannot find anything on cisco.com)

Robert Kolaczynski


Dnia Mon, 3 Oct 2005 10:59:34 +0200, Robert K. napisa³(a):

Founded on cisco.com: Also added in Cisco IOS Release 12.3(9a) and 12.3(11)T is the capability to have the hub DMVPN router behind static NAT. This was a change in the ISAKMP NAT-T support. For this functionality to be used, all the DMVPN spoke routers and hub routers must be upgraded, and IPSec must use transport mode.

What is the change in the ISAKMP NAT-T ? Is this feature included in the

12.3(14)YT1 for Cisco 1812 ?

Robert Kolaczynski

Hi Robert,

Post your configuration if you can, I have had DMVPN running on older versions of IOS no problem.

Maybe you have seen this page already but here are some examples that may help.

formatting link
Rob

"This release is based upon the Cisco IOS Software 12.3(14)T maintenance release"

So, yes it is included.

Cisco are very good (but perhaps not perfect) about having consistent support for features across platforms. For 100% certainty you need to check however it is very unlikely that a change of this nature wil not have been propagated.

It doesn't address your NAT problem however I thought that Document id: 41940 was particularly clear regarding DMVPN and dynamic routing.

formatting link
done Mike Sullenberger.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required